PublicClientApplication class

new PublicClientApplication(configuration: Configuration)

Parameters

Silently acquire an access token for a given set of scopes. Returns currently processing promise if parallel requests are made.

function acquireTokenSilent(request: SilentRequest): Promise<AuthenticationResult>

Parameters

Returns

• a promise that is fulfilled when this function has completed, or rejected if an error was raised. Returns the <xref:AuthResponse> object

Use when initiating the login process via opening a popup window in the user's browser

function loginPopup(request?: PopupRequest): Promise<AuthenticationResult>

Parameters

Returns

A promise that is fulfilled when this function has completed, or rejected if an error was raised.

Use when initiating the login process by redirecting the user's browser to the authorization endpoint. This function redirects the page, so any code that follows this function will not execute. IMPORTANT: It is NOT recommended to have code that is dependent on the resolution of the Promise. This function will navigate away from the current browser window. It currently returns a Promise in order to reflect the asynchronous nature of the code running in this function.

function loginRedirect(request?: RedirectRequest): Promise<void>

Parameters

Returns

This function redeems an authorization code (passed as code) from the eSTS token endpoint. This authorization code should be acquired server-side using a confidential client to acquire a spa_code. This API is not indended for normal authorization code acquisition and redemption. Redemption of this authorization code will not require PKCE, as it was acquired by a confidential client.

function acquireTokenByCode(request: AuthorizationCodeRequest): Promise<AuthenticationResult>

Parameters

Returns

A promise that is fulfilled when this function has completed, or rejected if an error was raised.

Inherited From ClientApplication.acquireTokenByCode

Use when you want to obtain an access_token for your API via opening a popup window in the user's browser

function acquireTokenPopup(request: PopupRequest): Promise<AuthenticationResult>

Parameters

Returns

A promise that is fulfilled when this function has completed, or rejected if an error was raised.

Inherited From ClientApplication.acquireTokenPopup

Use when you want to obtain an access_token for your API by redirecting the user's browser window to the authorization endpoint. This function redirects the page, so any code that follows this function will not execute. IMPORTANT: It is NOT recommended to have code that is dependent on the resolution of the Promise. This function will navigate away from the current browser window. It currently returns a Promise in order to reflect the asynchronous nature of the code running in this function.

function acquireTokenRedirect(request: RedirectRequest): Promise<void>

Parameters

Returns

Inherited From ClientApplication.acquireTokenRedirect

Adds event callbacks to array

function addEventCallback(callback: EventCallbackFunction): string | null

Parameters

Returns

Inherited From ClientApplication.addEventCallback

Registers a callback to receive performance events.

function addPerformanceCallback(callback: PerformanceCallbackFunction): string

Parameters

Returns

Inherited From ClientApplication.addPerformanceCallback

Removes event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window

function disableAccountStorageEvents()

Inherited From ClientApplication.disableAccountStorageEvents

Adds event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window

function enableAccountStorageEvents()

Inherited From ClientApplication.enableAccountStorageEvents

Returns the signed in account matching homeAccountId. (the account object is created at the time of successful login) or null when no matching account is found

function getAccountByHomeId(homeAccountId: string): AccountInfo | null

Parameters

Returns

The account object stored in MSAL

Inherited From ClientApplication.getAccountByHomeId

Returns the signed in account matching localAccountId. (the account object is created at the time of successful login) or null when no matching account is found

function getAccountByLocalId(localAccountId: string): AccountInfo | null

Parameters

Returns

The account object stored in MSAL

Inherited From ClientApplication.getAccountByLocalId

Returns the signed in account matching username. (the account object is created at the time of successful login) or null when no matching account is found. This API is provided for convenience but getAccountById should be used for best reliability

function getAccountByUsername(userName: string): AccountInfo | null

Parameters

Returns

The account object stored in MSAL

Inherited From ClientApplication.getAccountByUsername

Gets the currently active account

function getActiveAccount(): AccountInfo | null

Returns

Inherited From ClientApplication.getActiveAccount

Returns all accounts that MSAL currently has data for. (the account object is created at the time of successful login) or empty array when no accounts are found

function getAllAccounts(): AccountInfo[]

Returns

Array of account objects in cache

Inherited From ClientApplication.getAllAccounts

Returns the configuration object

function getConfiguration(): BrowserConfiguration

Returns

Inherited From ClientApplication.getConfiguration

Returns the logger instance

function getLogger(): Logger

Returns

Inherited From ClientApplication.getLogger

Gets the token cache for the application.

function getTokenCache(): ITokenCache

Returns

Inherited From ClientApplication.getTokenCache

Event handler function which allows users to fire events after the PublicClientApplication object has loaded during redirect flows. This should be invoked on all page loads involved in redirect auth flows.

function handleRedirectPromise(hash?: string): Promise<AuthenticationResult | null>

Parameters

Returns

Token response or null. If the return value is null, then no auth redirect was detected.

Inherited From ClientApplication.handleRedirectPromise

Initializer function to perform async startup tasks such as connecting to WAM extension

function initialize(): Promise<void>

Returns

Inherited From ClientApplication.initialize

Called by wrapper libraries (Angular & React) to set SKU and Version passed down to telemetry, logger, etc.

function initializeWrapperLibrary(sku: WrapperSKU, version: string)

Parameters

Inherited From ClientApplication.initializeWrapperLibrary

Deprecated logout function. Use logoutRedirect or logoutPopup instead

function logout(logoutRequest?: EndSessionRequest): Promise<void>

Parameters

Returns

Inherited From ClientApplication.logout

Clears local cache for the current user then opens a popup window prompting the user to sign-out of the server

function logoutPopup(logoutRequest?: EndSessionPopupRequest): Promise<void>

Parameters

Returns

Inherited From ClientApplication.logoutPopup

Use to log out the current user, and redirect the user to the postLogoutRedirectUri. Default behaviour is to redirect the user to window.location.href.

function logoutRedirect(logoutRequest?: EndSessionRequest): Promise<void>

Parameters

Returns

Inherited From ClientApplication.logoutRedirect

Removes callback with provided id from callback array

function removeEventCallback(callbackId: string)

Parameters

Inherited From ClientApplication.removeEventCallback

Removes a callback registered with addPerformanceCallback.

function removePerformanceCallback(callbackId: string): boolean

Parameters

Returns

Inherited From ClientApplication.removePerformanceCallback

Sets the account to use as the active account. If no account is passed to the acquireToken APIs, then MSAL will use this active account.

function setActiveAccount(account: AccountInfo | null)

Parameters

Inherited From ClientApplication.setActiveAccount

Replaces the default logger set in configurations with new Logger with new configurations

function setLogger(logger: Logger)

Parameters

Inherited From ClientApplication.setLogger

Sets navigation client

function setNavigationClient(navigationClient: INavigationClient)

Parameters

Inherited From ClientApplication.setNavigationClient

This function uses a hidden iframe to fetch an authorization code from the eSTS. There are cases where this may not work:

• Any browser using a form of Intelligent Tracking Prevention
• If there is not an established session with the service In these cases, the request must be done inside a popup or full frame redirect.

For the cases where interaction is required, you cannot send a request with prompt=none.

If your refresh token has expired, you can use this function to fetch a new set of tokens silently as long as you session on the server still exists.

function ssoSilent(request: SsoSilentRequest): Promise<AuthenticationResult>

Parameters

Returns

A promise that is fulfilled when this function has completed, or rejected if an error was raised.

Inherited From ClientApplication.ssoSilent